Legal

Privacy Policy

Last updated: April 2025

Klasstack Technologies Ltd (“Klasstack”, “we”, “us”) operates the Klasstack school management platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services.

1. Information we collect

Account and school data

When a school registers on Klasstack, we collect the school name, address, contact details, and administrator account information (name, email, phone number).

Student and staff records

Schools input student and staff information including names, dates of birth, contact details, academic records, attendance, and fee history. This data is controlled by the school and processed by Klasstack on the school's behalf.

Usage data

We collect log data (IP addresses, browser type, pages visited, timestamps) and device information to maintain and improve the service.

Payment data

Fee payments made through Klasstack are processed by Paystack. We do not store card numbers or bank account credentials. We receive transaction confirmations and payment metadata.

2. How we use your information

  • To provide, maintain, and improve the Klasstack platform.
  • To send service-related communications (account alerts, security notices).
  • To process fee payments on behalf of schools.
  • To analyse aggregate usage patterns and improve product features.
  • To comply with legal obligations.

We do not sell personal data to third parties. We do not use student data for advertising purposes.

3. Data sharing

We share data only with:

  • Service providers, infrastructure, payment processing, email delivery, under strict data processing agreements.
  • School administrators, who have legitimate access to their own school's records.
  • Law enforcement, when required by Nigerian law or a valid court order.

4. Data storage and security

All data is stored on servers in compliant data centres. Data is encrypted in transit using TLS 1.3 and at rest using AES-256. We conduct regular security reviews and penetration tests. Access to production data is restricted to authorised personnel on a need-to-know basis.

5. Data retention

We retain school and student data for the duration of the subscription and for 90 days after cancellation, after which it is permanently deleted. Schools may export a full data archive at any time from Settings → Export.

6. Your rights

School administrators may access, update, or delete their school's data at any time via the admin dashboard. For requests relating to personal data held about you, contact us at privacy@klasstack.com. We will respond within 14 business days.

7. Children's data

Klasstack processes children's data (student records) under the instruction and responsibility of the school. Schools are responsible for obtaining any parental consents required under applicable law before entering student data into the platform.

8. Changes to this policy

We may update this policy from time to time. We will notify school administrators by email at least 14 days before any material changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email privacy@klasstack.com or write to:
Klasstack Technologies Ltd, Lagos, Nigeria.